Privacy Policy

Last updated:

This Privacy Policy describes how Tluzarinstxly ("we", "us", or "our"), operating at 279 Wakefield Street, Te Aro, Wellington 6011, New Zealand, collects, uses, and protects personal information you provide when using tluzarinstxly.world ("the Website").

We are committed to protecting your privacy in accordance with the Privacy Act 2020 (New Zealand), the General Data Protection Regulation (GDPR) (EU) 2016/679 where applicable, and all other relevant data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

2. What Personal Data We Collect

We collect the following categories of personal data:

• Identity data: full name
• Contact data: email address, telephone number
• Order data: order details, quantity, delivery notes
• Communication data: messages you send us through the order form
• Technical data: IP address, browser type and version, time zone, browser plug-in types and versions, operating system, pages visited, time on site (via cookies, subject to your consent)

3. How We Collect Personal Data

We collect data directly from you when you:

• Complete and submit the order form on our Website
• Contact us via email or telephone
• Browse the Website (technical/analytics data collected via cookies, subject to consent)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

• Order fulfilment — processing and delivering your order (legal basis: performance of a contract)
• Customer communication — responding to enquiries and providing order updates (legal basis: legitimate interests)
• Legal compliance — fulfilling our obligations under applicable law (legal basis: legal obligation)
• Analytics and site improvement — understanding how visitors use the Website (legal basis: consent, where required)
• Marketing communications — sending relevant promotional information (legal basis: consent)

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order and customer records: 7 years (to comply with New Zealand tax and accounting obligations)
• Marketing consent records: until you withdraw consent
• Website analytics data: up to 26 months (aggregated and anonymised thereafter)
• Enquiry correspondence: 2 years from last contact

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share it with the following categories of third parties solely to the extent necessary:

• Delivery and logistics providers — to fulfil your order
• Payment processors — to process payments securely (they are independently responsible for their own privacy practices)
• IT and hosting providers — to operate and maintain the Website
• Professional advisers — legal, accounting, or compliance purposes where required
• Regulatory authorities — when required by law

All third-party processors are required to handle your data in accordance with applicable privacy law and to implement appropriate security measures.

7. International Data Transfers

Where your personal data is transferred outside New Zealand or the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities or adequacy decisions, in accordance with applicable law.

8. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

9. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data where there is no lawful reason to retain it
• Right to restriction — to request that we limit processing of your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us using the details in Section 1. We will respond within 30 days.

10. Cookies

We use cookies and similar technologies on this Website. For full details, please read our Cookie Policy. You can manage your cookie preferences at any time via the Cookie Settings option.

11. Children's Privacy

Our Website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

12. Complaints

If you believe we have handled your personal data incorrectly, you have the right to lodge a complaint with the Office of the Privacy Commissioner of New Zealand (www.privacy.org.nz) or, where applicable, the supervisory authority in your country of residence.

We encourage you to contact us first so we can address your concern directly.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The "Last updated" date at the top of this page will be amended accordingly. We encourage you to review this Policy periodically.